SigmaFlow Compliance & NERC CIP Traceability SME

Amtex Systems Inc is an information technology and talent solutions company offering talent and BI consulting to the companies in US for over 25 years.

Our solutions are designed to fill resource gaps, by providing the right candidates who deliver value to the organization. Our propensity to nurture and build strong relationships with our clients helps us better understand their business demands and gives us the ability to provide services that are on time and rise above the rest.

Job Title: SigmaFlow Compliance & NERC CIP Traceability SME
Job Location: Remote (Client based in West Coast time zone)
Project Duration: Approximately 6 months, with potential to extend into follow-on work
Mode of Interview: Video
 

Must Have Skills: Deep, hands-on SigmaFlow platform expertise; deep NERC CIP compliance/requirement knowledge (CIP-002 through CIP-014, especially CIP-004, CIP-007, CIP-010, CIP-011)

Overview:

The client is seeking a resident expert in SigmaFlow compliance workflow management and NERC CIP requirement traceability to support a utility sector consulting engagement. The work is centered on answering a single executive-level question: should an established SigmaFlow implementation carry a NERC CIP compliance program forward through a platform upgrade, or through a ground-up rebuild of its workflow implementation? Leadership requires this answer backed by evidence-based analysis, testing, and documentation - not opinion.

This is deeply hands-on analytical work. The contractor will be working directly inside the platform, inside the compliance standards, and in front of the people who operate both. This individual is expected to bring the deepest SigmaFlow and NERC CIP knowledge on the team and operate with minimal oversight.

Key Responsibilities:

NERC CIP Requirement Traceability and Compliance Analysis:

• Trace each compliance workflow and workflow step to the specific NERC CIP standard/requirement it satisfies, establishing a defensible chain from requirement to policy to procedure to workflow.
• Build and maintain a requirement coverage matrix spanning CIP-002 through CIP-014, with concentration on CIP-004, CIP-007, CIP-010, and CIP-011.
• Identify requirements with no supporting workflows and workflow steps with no traceable mandate; recommend workflow designs anchored to actual standards requirements.
• Validate that each workflow produces auditor-ready artifacts in appropriate audit form.
• Apply CIP-011 BCSI handling obligations to non-production environments, test data strategy, and documentation storage.

SigmaFlow Platform Analysis and Upgrade Validation:

• Document current-state architecture: platform version/components, workflow logic, SQL datasets and conditional routing, reporting, role/permission model, authentication architecture, integrations, and data retention states.
• Verify non-production test environment against production baseline (workflow counts, accounts, role assignments, configuration, schema, data integrity, attachments).
• Triage defects and perform root cause analysis across deprecated activities, API/database schema changes, permission model changes, custom code incompatibility, integration endpoint changes, unsupported customizations, and configuration drift.
• Test role/permission boundaries for privilege escalation and access gaps; validate separation-of-duties patterns for administrative accounts.
• Estimate design/build/test/validation effort per workflow; prioritize remediation backlog; contribute to cost/risk/benefit comparison for the upgrade plan.

Knowledge Capture and Documentation:

• Conduct structured SME interviews to recover undocumented workflow intent, triggering events, edge cases, and historical failure modes.
• Author SOPs, administrative procedures, architecture reference guides, playbooks, and cutover runbooks (with defined rollback triggers) to client document templates.
• Document compliance continuity plans covering platform outage windows - production platform cannot go dark.
• Conduct teach-back knowledge transfer sessions to client staff and delivery team, reducing single-person dependency.

Must Have Skills:

• Deep, current, hands-on SigmaFlow platform expertise.
• Deep NERC CIP compliance knowledge (CIP-002 through CIP-014, especially CIP-004, CIP-007, CIP-010, CIP-011).
• Strong requirement traceability / compliance mapping experience.
• Platform upgrade validation and defect root-cause analysis experience.
• Access governance / privilege and separation-of-duties testing experience.
• Strong technical documentation and procedure-authoring skills.
• Ability to run structured SME interviews and lead knowledge transfer sessions.
• Ability to operate independently with minimal oversight.